2026-10-22

AIHOT 日报 · 2026-10-22 — OpenAI 披露 Patch the Planet 计划借助 GPT-5.6 Sol 发现 PHP 关键漏洞并协调全球修复 / 55 signals

Daily Edition

2026-10-2255 signals

Lead Story

3 items

AIHOT 日报 · 2026-10-22 — OpenAI 披露 Patch the Planet 计划借助 GPT-5.6 Sol 发现 PHP 关键漏洞并协调全球修复

OpenAI 宣布在过去两个月牵头维护者、研究者与安全厂商联盟,修复 PHP 的关键漏洞,其中 Calif 用 GPT-5.6 Sol 发现一处严重缺陷,Wiz 也独立发现并报告了这两个漏洞,PHP 维护者主导修复和发布。 模型发布/更新 Baseten 发布决策模型 mammoth-1(27B)和 elephant-1(9B),开源并免费试用一周 产品发布/更新 Anthropic 开启 Claude Duet 研究预览,Claude 以主动式智能体接管日常工作 OpenAI API 支持 12 小时 prompt 缓存,Codex 与 Work 用户缓存永久保留 蚂蚁集团与 vLLM 社区开源量化推理内核库 Humming 行业动态 OpenAI 披露 Patch the Planet 计划借助 GPT-5.6 Sol 发现 PHP 关键漏洞并协调全球修复 OpenAI 报告 GPT-6.1 Sol 与 GPT-6 Astra 内部部署中抑制失准监控警报事件 Wiz 披露 LiteLLM PyPI 包供应链攻击,恶意版本 v1.107.0 窃取凭据 OpenAI 与 Google Cloud 达成合作,OpenAI 模型将进入 Model Garden SpaceX Q3 2026 财报电话会要点:AI 算力业务成最大收入来源 论文研究 Microsoft Research 与合作者证明 31 年历史的 KLS 猜想 Anthropic 用 Claude 缩减开源代码攻击面:25 个项目发现 493 个问题 技巧与观点 编程 Agent 增长遭遇人类评审瓶颈:Tessl 博客解析信任赤字 via AIHOT · https://aihot.news/daily/2026-10-22

Read original ↗

Today's PHP Security Release, and How We're Strengthening PHP Security

Today's PHP Security Release, and How We're Strengthening PHP Security If you're running anything on PHP it's vital you upgrade - today's updates (across the entire PHP 8.x line) address two remote code execution holes, and there have been exploits circulating since last night, thanks to a leak in the coordinated disclosure process. This post from the PHP Foundation explain what went so wrong: On Tuesday, October 20th, at around 15:00 UTC, the two CVE IDs began circulating on online forums and social media. They came with a wrong release time and a wrong CVSS score of 10.0 (the actual score is 9.2). No technical details leaked. In response, the PHP project brought its pre-announcement forward and published it at 19:30 UTC . It also moved the release from October 22nd, 14:00 UTC, to October

Read original ↗

AI & Builders

7 items

Panache — RTS Belle Époque pour mobile

Panache — RTS Belle Époque pour mobile Well this is delightful: I released Battle Drones yesterday under an Apache 2.0 License and there's already a French language fork which reskins the game to take place in steampunk 1900s France and adds an animated intro! Panache est un jeu de stratégie en temps réel pour mobile et navigateur, dans la France de la Belle Époque (vers 1900) : dirigeables, Fardiers à vapeur, Creusot cuirassés, automates en képi, Gargantua la forteresse marchante — et beaucoup de panache. You can play Panache here - it's worth clicking that link just to experience the new intro video. So far it's mostly just aesthetic updates as opposed to gameplay changes. The music has had a French twist added to it as well. The new steampunk models are so cool! Here's a page with the o

Read original ↗

Tech & Industry

14 items

Bose acquires Skullcandy to help it reach a wider audience

Bose announced today it has acquired Skullcandy. Although the two companies are competitors in the consumer audio space, Skullcandy recently partnered with its new owner to bring several of Bose's audio technologies - including its head-tracking spatial audio and excellent active noise cancellation (ANC) - to products like the Skullcandy Crusher 1080 ANC headphones and […]

Read original ↗

Airbnb bans making guests do dishes and take out the trash

Checking out of your next Airbnb might be less of a hassle now that the company is banning hosts from including time-consuming chores in their house rules. Airbnb's updated house rules policy, which starts with reservations booked on or after November 20th, says hosts can't ask guests to "complete tasks that require significant effort or […]

Read original ↗

How Wikipedia’s Editors Keep the Online Encyclopedia Human-Written

Ellia Lebleu is a founding member of the WikiProject AI Cleanup , a volunteer effort launched in 2023 to find and remove AI-generated material from Wikipedia that breaks the website’s guidelines. When the cleanup began, AI writing was often betrayed by conspicuous clichés. Today, the project’s volunteers are developing tools to detect subtler forms of machine-generated content and debating AI’s role in the world’s most widely used encyclopedia. When did you realize Wikipedia had a problem with AI-generated material? Ellia Lebleu: It was around December 2023. A few other editors and I were chatting on Wikipedia’s Discord server, and we had all seen very strange articles with the same odd characteristics. They repeated phrases like “stands as a testament” or “rich cultural heritage.” They so

Read original ↗

Meta to create a new class of shares to fund AI push

Meta says it's issuing a new class of shares to fund its AI initiatives. As part of its third-quarter earnings report released on Wednesday, the company says the non-voting stock will also go toward potential acquisitions and employee compensation, with trading beginning in 2027. "The scale of investment required to compete, sustain growth, expand infrastructure, […]

Read original ↗

AI Travel & Travel Tech

10 items

World Affairs

15 items

Design & Culture

1 items

Outside the Bubble

1 items

When it started to burn

Horrific violence, enduring terror and ceaseless solidarity: four years of war through the eyes of Ukrainian civilians - by Aeon Video Watch on Aeon

Read original ↗

Builders on X

4 items

opus is great for writing... when you dont happen to have any random no-no words in your prompt. jfc, @CompleteSkeptic is right, give me prod, not god. i cant build an ai media org with this in the critical path. https://t.co/U8MOOmykJO https://t.co/ORcvXeH7xz

Open on X ↗

Pretty cool that we clearly have an emerging form factor for what AI might look like for the foreseeable future as autonomous systems dedicated to specific tasks or domains. This is a huge leap past the LLM wrapper days because the new expectation is that you can finally farm out more sophisticated work to the agent to tackle for you. And you can reliably trust that work can get accomplished properly (still with a human in the loop) because of far better tool and computer use, and the general intelligence of the models improving. 1) The tool and computer use capability increases in the models mean that you can provide the agent with far more granular access to external data systems and other software to operate. This means, in effect, the agent begins to execute workflows similar to how a person would have in that same function. And where there isn’t existing software, the agent just builds it itself. This is a huge unlock. 2) Next, the actual capability of the models are improving in just about every vertical domain. The models can make far better judgment calls in legal, do deeper bio research, scan for security issues in code, understand supply chain processes, and more. Obviously in many of these spaces then models still have worse intuition than people, but that will only get better. 3) Finally, the harnesses and surrounding infra — sandboxes, file systems, data pipelines, etc. — allows for longer running agents, agents to be able to work on arbitrarily complex or long tasks, process data at enormous scale, and more. Few of these components worked well for AI even a year ago, but we now have many of the core primitives necessary for more autonomous systems. When combined with the right UX, implementation, and change management for the human oversight and coordination, it’s clear that these autonomous systems will become quite powerful in a wide variety of enterprise workflows. We’re starting to see them in IT automation, cyber operations, drug discovery, manufacturing, AI research, and more spaces. You can almost imagine one or more of these systems for every role in the economy. Quite a bit of opportunity ahead.

Open on X ↗

i tried to make codex make animated explainer videos but ngmi https://t.co/UT7xloxtXc

Open on X ↗

See you at @Cloudflare Connect tomorrow! Will be chatting with @dok2001 about agents https://t.co/P4oYlOZ80s

Open on X ↗